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|flB><» 7 r © IBH 1MB * - h I B«» «* ^ * « v * 

v^tjtts* & ffi* -r s a V 7 T »bp t . 

tMB * n >y 9 C T , Iff ISA % y "7 7 »3P ffi # & B v * T lirffi* * 7 r © 
ftflHX^- MJMttt^n >y * l^n^ &ntr >y >»&**)©** 

tMBm©«*»»* IMfi*^- hB«#K:B«a*iTV^3o©yD v * ©e> 
fc, HUf20^O7-D y * /I* 7 7 KlBltatlTV^-^a >y * £A7J£ 

1 ffi|E# 2 0 0 1 -3 
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* * 

X L *~ a H ; 

x R - a M XOR F(a H , b.) 
Xfl «- a L XOR G(x H , bp 

*F(a, b), G(a, b), ^-*©«Xft-. tS«jK«WS*©±fit^n y ^ S:^, * 
X L V 
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x M «- a H XOR F(a M , b.) 
x H «- a L XOR G(a M , bj) 

«SF(a, b), G(a, b), f=-*<DftAfc«-, *ff«*»*<0±tt*n v 9 ^ 
l^Q y ? &64fc?y 

tram***** ************ 

p «— a XOR b, 

ti «-S[pi] (1 S i ^ 8); 

uH «- tl||t2||t3||t4; 

uL «- t5||t6||t7||t8; 

uX «- uX XOR SHR8(uX), X={L , H} ; 

uX «- uX XOR SHL16(uX), X={L, H) ; 

uL «- uH AND OxfOfOfOfO; 

uH «- uL AND OxOfOfOfOf ; 

out «- uH 1 1 uL; 

AS:-. P=P1||P2||P3||P4||P5|| P 6||P7||P8,(1 ^ i ^ 8)fcU S*V*Xffi 
**, ±«*&tl. 12, t3. U. t5, 16, 17, 18, tfcttSM. 64** MTC© 
xbfy W*i/7K £<y:7hS:**l€4%SHRx, SHLx^l") 

[11**7] ilsMliM©*^*****^* 0 ^' 

3 ffi$E# 2 0 0 1 -3 
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ttf h * a * * k: c t , ^7 Sfltff b*M^IW^7t(dW 
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^3 ^ m^i:?- * a zmmwmmmmw'tz z. t ic i o t 

firfaii{KSLffc£j&£gttte 

BtftH A^y 7 r (D mm ftm t. m t a * - h mm® (Dmmmnt.^m^f=.mm^n 
mmnv y r<Dmm\Hmtmm^- bmm®<z>mm\Hmn ^m^r^mm^n 

mwnitMffi't&XT- bmmmm®t.. 

mm ? n v v izfo c r , mms* vvr mm® ftfizm^x mm^ 777® ft® 
wmntmm?z>rtv7Tfflw®£.. zffi*.. 

*m*.. mm^vyTtemmy r uv?<D^A%:mx., 
mmxr- bwtm®&. 

mm^ v?T (Dmmft^ t. mm * t- - h samau ©ta-it ^ & m v % & &mm& 
m®t. 

0] fa-itmttiiyn-fe^^ii^^^fcfmiiic. 
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fata a v 7 r <d s m ft m t m m * r - h s mm m m i*i m t. & m v > tc mm & n 
v * mmmm & m # t- s a ^ ? r £ > 

BtffHX T" - h fB'IM tt, 3^"n *y * (£ £ L 1 ZfU v V ten if *j b & -5 ) <Z>^ 

^gygjn <d e> is i ^ n v ? 7 - # it ® ftfmm t l t a * -r s as *s t , 
cit^i i] m^mmm(Dmmim^mmx$>-ox, 

X H *"• A M 

X M «- A L XOR F(A M , Bj) 
X L «- A H XOR G(A M , Bj) 

3P£F(A, B), G(A, B), # ©A^f .*«-, Btfl2^SIMm©±^^D y ? feX H , 
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P <— A XOR B; 

Tj «- S[Pj] (l £ I £ 8); 

U H - MDS^T^ T 2 , T 3 , T 4 ); 

U L - MDS 2 (T 5 , T 6 , T ? , Tg); 

U H = X 1 1 1 X 2 1 1 Xg 1 1 X 4 

o L = x 5 1 1 x 6 1 1 x 7 1 1 x 8 

out <- x 5 1 1 x 6 1 1 x 3 1 1 x 4 1 1 x : 1 1 x 2 1 1 x 7 1 1 x 8 ; 

# (DttA*^. P = ? 1 1 1 P 2 i | I P 3 1 1 P 4 1 1 P 5 1 1 P 6 1 1 P ? 1 1 P g (1 ^ I 
^ 8)tU S/Ky *.*<Dffl#&_fcffc#&T lf T 2 , T 3 , T 4 , T 5 , Tg, T 7 ,T g> 
ttS[X], MDSff^ItCJ:S3E«iaPS:MDS(T a , T fe , T c , T d ) £.mt) 

z. t & mm t. •* 

frff3A*y:7 7^*£l8^n>y ?£:U falBAy 7 7W8k%\%. J^Ttf>#LJg£ 
#@^*n y ^7, ^18#@^n >y 7 £l&v^:/n >y # ^T&tf^n v 7 h LT 

m^jirs ; 

^2§g *y * tm7^rB7"U >y * ^C&PffilftilS^mJI^fTV^ £3*iSlittg 
Hi5#i :/ n >y * <D±m/2-^ p y ^ hTfti/2^n v 7 £ A*i#x.£:/ n «y * 
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mmm & mm a ? ? rmomm. t m s 0?- # ic#:R lt mm a 

r t. * mm. h -t z> mmim£&$£m 0 

mmxT-b mmm te&msi^ * - # & m v * z 
z. n z t ? z mmim^mm. 

[0001] 

[0 0 0 2] 

m&<Dtzffi] &mmm^&ffi & mm l tm£&f& 1. 1=. e> m<n 

m<D$iI&. X h U -A8f# (stream ci P her)M& if iZ £ V^T, £Lft<Z)j&£4£tt: 
Tffey, HBRtcttSfi(SL»^*as*fctt-etiS:Mv^$iaJcj: y^Sti-5* 

[0 0 0 3] 
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m v> r n tmm £ n x ^ & v % t=. \z m&mm 

[0 0 0 4] 

iSClftl : Daemen, J., Clapp, C. , "Fast Hashing and Stream Encryption wit 
h PANAMA," Fast Software Encryption, 5th International Workshop, Procee 
dings, LNCS1372, 61-74, Springer-Ver lag, 1998. 
: ^ffl#fr 5, 454,039^ 

X# (linear feedback shift register (LFSR)) \Z & £ -5 V^£%te(g[J$:£J&^g 
LFSRjc%»i:t5v^8llKSL«^^iBtt, J6*Ttci»a*3*iTv^ 0 

:$C$£3 : B. Schneier, "Applied Cryptography," John Wiley & Sons, Inc., 1 
996. pp. 369~428 D 
[0 0 0 5] 

TOSilbT, -fU v ^Hf# (block cipher)^ §r5ffM b feOFB^E - F(0FB mo 
de), jj^yz^- K (counter mode) & *lT V^ £ -£ 

zfuvtm^&ffi&mmisfc&mz'D^Ti*, jcm3, pp . 203~206{cga*g$ 

;£i£4 : B. Schneier, D. Whiting, "Fast Software Encryption: Designing E 
ncryption Algorithms for Optimal Software Speed on the Intel Pentium Pro 
cessor," Fast Software Encryption, 4th International Workshop, FSE'97, H 
aifa, Israel, January 1997, Proceedings, Lecture Notes in Computer Scien 
ce Vol. 1267, Springer-Ver lag, pp. 242-259, 1998„ 
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[0 0 0 6] 
[0 0 0 7] 

*iJS#«rtB"C*y, fro, A-K7x7t%ilil^o0j!&Ii©/lN§V^i^Hr 

( i i ) ^ □ ^ $f ft f c J: y , B#M t p, BIM t+i /s © x ^ - h (D & ft o tc «> 

[0 0 0 8] 

'y77t, A*;77 0 ia« i: * ^ - h IH«SP ©IBtti W§ h MWk Z ft 

<Dmmft®t:zm^r=.&m*ft^mm%:*:mjj-tz>rty yr^mmt.. vuv 
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[0 0 0 9] 

tt, 7.7-- hfB'l»al5{CfH'i:StlTV^<g>3o(Z)y^^^(Z)e)^. fgl£|g2©-o© 

ma-fu+j* yrizmmztir^z-fay z zimmmmis. n^y 

^Z>%Z0)-?n y?£. Jiy :7 7lCgB'Bl£*lT^£^n y V *A±S£ LT&Vtt 
WimNz Afj 2 tit~ 7 a yth itmtezzfu yth LT, ^f - hffi«asiciH« 

$ ti s «fc e> ic^tt-r & «ssp & m a s . 

[0 0 10] 

±ffi«J*tt, X^- h<Z>A£2 Z3-7ay ?£A±Xn¥ y h £ f £ Z. £ fC <k *J , 
»J^SS:^riei:LTVNS 0 3«bSC, *-5=-- h £ &3>fO y V Xntf >y h £ 

■tZZtlzl: y, /\- K^xTH^^CDta^m < "TSi fc#«rtB lefts 
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(b) w N^iTii^- ^rmmz&^x-mmte. 

(c) !&m*=Evam^/\- w^rmmmntf- bm&'p&<> i^xh^ 

[0011] 

^<6(SL^^J^^S (pseudorandom number generator) : SLifc^'J (random number 
sequence ) * fc«><3DfcJSMt (initial value) £#*.T, *^a«^J(pseu 
dorandom number sequence) $r^^"f"-g>^fi 0 

H&SLffc (pseudorandom number) : *» U < teMPStf) * h & »J , £ 

(symmetric-key encryption) : m j % J tt#!iMil&-%'lk#kMlzm DH£ 
5££ (plaintext) : fiS&JSffK * feli^^S^©^- # »J , 7 s -f 

f-*- * s v v t e> ) > it tmzmwmm znozn vm^mm (encrypt i 

on) * f- Itm^mm (decrypt ion) £ ff "5 R» ^&fl5o 



ffilE#2 001-3099768 



#2001—145783 



StfytXism) : 3~10tfy hmm<DMm&. W V>#Mi^ttfc o 
[0 0 12] 

j tetfy h^i:CD^fi6«H&S^ (exclusive or) &m?o 

02{c^1-J; e> tc, #^Jfe#H©a»£/£g«(200)ii, i^n >y * €r64tTy h £ 
L a £ 64 tf >y > x 3 :/ n y 9 <D iH'Ufl^c fcfli^SX^-N f B'UBP (£*T> Xf- 
h £:V^)(201)fcJ:tf. 64tfy H X32^n y * ©ffiHWe &ffS*. £ Ay 7 T (202 
), X^-b(201)<DWS^S:JSifr-rSX^-h^S(203), /<*;7 7©W« 
&Ilrt5^y7 7 (204) , A v -7 y A* & «J *J mX S ^ >f >y (207) £ ^£ 
tlS:1Wfflfr-SM»aP(214)T?«^Stl«6. 

V%##«fcV^ L V^H»JfC;fe VMTli, 1 y * &64tfy 

h£U X-r— h©;*:££ £3:/n *y A>y 7 r (Djz^Z £32:/n v V H IT 
s o r *uc <fc *J «t3® £M?!Hfcf « 3 £ £ EM&ftK &/h §<tsri: # bTIBk: & 

So 

[0 0 13] 

#§I»J£a- KfiTICti^bfci#, h U tfH&Z Z n >y *fg-^(210) 

x-y— M2oim, x^- ^^map(203)(D'fa?:ffbv^^7 : •- h# 

i: l/t ABUTS. Ay:7 7*>H<BtC*Oy*te^(210)&gfei-*i:, Ayy? 

(204) ©At &$t l t b naurr s o ffir«ri§r» (214) » ?d»^ m # (210 

(2i2)hx-r- h(20i)ffi#tf>^-f*i£5g#*?- Ay 7rSem» 
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(204m, X^y^(207)<WU#*CJ&CT&^£4X&A;M(64^y h) 
[0 0 14] 

msi*> m2(DAy -7 rmmm (204) <Dmf&z & vumizm^-t^^cox^^o 

AvyrMWk3(20A)it, rty vr (202)^e>A*S4xfe32^n v ± 

y?£ LTffiij-T-So m25^n^^h, H32^D y ?tf>_h&£T&£A*l 

^fc^cDiKD^^iiafD^mSr^o fcft-oTfi®^n >y * t. LT&fj-?Z> 

tll^n'^ilbT^tS. 
[0 0 15] 

010:713 MC=&£o~V^|il20)i&f^$:M^£o 

'*HJ6ffilT?J±, SL8t£jEfcSm (200)1*, Sl<5D^a^^>y :7*102fre>*^y 7*108 
^^yyi02^P>104lcfeV\T, rtas^ttK^^JJB-fb, SLIM(Df^©t>yh7 

X^>y7°102 : Xf- h(201), Ay7 7(202)ffl^, «fc WJfflHag& (214) W 
SP©*^y ,£U -fey hAi7(211){C J: y Ui2>y VtZ><, t^tffltf'y h 

*^y:/io3: smmzmfe-tzmmtLT. mmmtsimm^t.zAjim 

Zftb<D?av?mmiCltAv7T(202)^*T-h(201)teM&<D£& i )fc 

ifit5 0 $ e>{cffiijtgii5:N(2i3)&AiJt-^o ^mmmx^t, ^m.-tzfLmn* 
m^ir 2>f=.®e>mmm£%m$m^. z^izmtimmzznzftus^y bom 

^104 : ®nm&*$im.~$'z>t=.®>\z, ustuy t&mzfio. *mmmi& 

(214)«, Z.<D*^ V 7°J^T«7x-f -/^(207)#7^- h £ig3R 
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, Mffl-tZo *«M(C^VAT«, WHIZ* XT- hffi7Jtf>_tft64t^y M fi #7< 
4 ^^-(207) \ZA±-£tlZ>» 

TsT V 7°105 : N=0&e>kmT(X^y ^lO^-r^tf, ^ ? Tf3& Xt=- V 7°1 

06icattf o 

75^y7°106 : X^- h£&S(203)fcmSI8!;JI&fTV*, g|5#SL»J64t^y h£ 
^^^^"107 : A-y7 7ilXf - h JC, *D v*-fg#£*T— h ^m®> (203) £ 

v y 7 mm® (202) (c j: s mmmmi^m mwzMm-tz* 

7^y:7°108 : N=N-1£ IT, >y 7°105lCJi£ o 

±SHX^ >y 7105^ e> 7^ >y 7°108<Z)*i y jg L tC «fc y tlS - oJSUKDgfcfr 

5 _hSBx ^ *y 7°105^ h 7 >y 7°108 £ Tf ©— 3* ©i*f^ & 9 ? > F £ o . 

[0 0 16] 

milf-r€) A^y "7 r (202)©gB«1!g«©«/*tt64lf y h x 187*13 *y # ^-TSo 

A-/7 7^mSP(204)tt, /\^y 7 7(202)^^X75$ 4x£l87a >y ? (73 ? ± 
&;fr£$t;iT3!2, 12, 187*n «y ^ @ $:i^fe7'D >y 7 $:-oTfiiffl7'D i: 

m-fuy Z t.\^T&j3~?2> a l|157n^y^(73_h^l/27n^y ^hT^l/2 

7*n >y * &A*i#7k.fe7*n *y * £Hi27n >y * &gMffiW»JI*DLfctilirraJll«:j& 

137n^y^i:LTm7Ji--5o £&IC, mzzfuv >; >y ?-(207)(Z)£7ji; 

[0 0 17] 

Hl2tt, 011<Z)/^y -^TSemaJSrffiv^fea^caR^ieiKOfll^&W^S 
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%<DT*$>&, EI12©^^{Cfe^S, 01(D7D-f f - NCDX-^y ^103, 104© 
X-r^yi03: $$g/\°^;*-#£LTii'fi#(1201)^ &fflA<7*-% illt 

128 if ^ h(2yn^^)ht-^> 0 h (2oi)jc&, rm^ziy vizsimm^ 

128fcfy h$:A*-re„ 

K H II K L = il<fffg(128lf y h) 

Y 2I *~ K L >>> 71 (° = 1 < 9 > 

Y 21+l "~ K H <<<? ( I + D (0 Si I < 9) 

B Q || Bj | | ... | | B 1? = Ay-7 7U(6A\fy hX18^n*y?) 
Bj Yj (0 55 I < 18) 

L L , ^7 7 7 »3P (204) £ /g V n T Ay V 7 <D fW-f£ JK $:S&m;fC Jg^ff ^ S 
[0 0 18] 

03tf);fif&jC;}3^T, M201)(Z)^^©J:e>&CLTfi : e>o t=.f=.L>. & 

T©7^i'JXAT', &ep<-te^-#<DfSA£, I Ui^ltr (concatenation, ^ 

)&, -zn^nm-fo 

7s r - h (201) K -T -5 o 
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a R || a M || a L = 7.7— Ml(192lf y h) 
\ «~ a H ; 

x H - a M XOR F(a H , b.) 

x M - a L XOR G(x H> b bi*j) 

x M $:Sl5^SL»J^frm*b, ^CDX^-h^bT, x H || x M || x^ftjj 

i$i&Jlfn£*ifc&, ^nvf t+ijcfevxTFBB»(40i)©ffi*fc»»»»«»Sti 
5£#>, FH»(40l) £:GMtfc(402) fcttUfcSfeSI&fTS @8«Tf *>* - £#3* ^ 

[0 0 19] 

7.7— h(20i)©ffi&a- F-t-So 

a R || a M || a L = X^- h#(192lf y M 
X L *" V 

X M *~ a H X0R F( V b i ) 

x H «- a L XOR G(a M , bj) (fc£bi*j) 

x H £$#sLm?!j£bTm#u ac©*^- h^t^bT. x R ii x M ii x L &m# 

(40i)/\<Z)A*i:G5e^(402)^cz)A*^^lHl^^^ t J> &S©«Ht#Wtg{c& 

So 

[0 0 2 0] 

09^X7=-- h«g|»(203)©«l©#««:«^ , r*H^**- H9©*JfcK:i3V> 
T, X-r- b(201)©^&&&©<fc'5lCbT*?e>o 
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h (201)<ZH@&n- KtSo 
A H || A M || A L = 7,7— hffl(192lfy h) 

X H *~ A M 

X M <- A L XOR F(A M , Bj) 

X L «- A H XOR G(A M , Bj) (fcfdLl * J) 

II X M || X L $:t[}iJt5 0 
[0 0 2 1] 

^I7^n *y ^ a i i: tfnTIB t?*><5. 

±18183, H4^c^•r*5tJK^©«il>6f^SS:»fflUT*»Av^. 

[0 0 2 2] 

jK^X, Sl(601)~S8(602)fCJ: Vimj&M&Zfi 3. Sstfv** S1(601)~S8( 

602) ©8tf^ hffiijtc $ e^c^c^-r^M-s^vv m^;out§:^^-r-£>o 

I$CS£5 : J. Daemen, V. Rijmen, "AES Proposal: Rijndael," The first AES C 
andidate Conference, available at http://www.esat.kuleuven.ac.be/~rijmen 
/rijndael /rijndael docV2.zip. 

<D R i j n d a e 1 X& fc> *l T ^ -5 T © & ®L ^ Z. iL ifi oj fg T* % 3 = 
[0 0 2 3] 
S [256] = { 

82, 9, 106, 213, 48, 54, 165, 56, 
191, 64, 163, 158, 129, 243, 215, 251, 
124, 227, 57, 130, 155, 47, 255, 135, 
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52, 


142, 


67, 


68, 


196, 


222, 


233, 


203, 


84, 


123, 


148, 


50, 


166, 


194, 


35, 


61, 


238, 


76, 


149, 


11, 


66, 


250, 


195, 


78, 


8, 


46, 


161, 


102, 


40, 


217, 


36, 


178, 


118, 


91, 


162, 


73, 


109, 


139, 


209, 


37, 


114, 


248, 


246, 


100, 


134, 


104, 


152, 


22, 


212, 


164, 


92, 


204, 


93, 


101, 


182, 


146, 


108, 


112, 


72, 


80, 


253, 


237, 


185, 


218, 


94, 


21, 


70, 


87, 


167, 


141, 


157, 


132, 


144, 


216, 


171, 


0, 


140, 


188, 


211, 


10, 


247, 


228, 


88, 


5, 


184, 


179, 


69, 


6, 


208, 


44, 


30, 


143, 


202, 


63, 


15, 


2, 


193, 


175, 


189, 


3, 


1, 


19, 


138, 


107, 


58, 


145, 


17, 


65, 


79, 


103, 


220, 


234, 


151, 


242, 


207, 


206, 


240, 


180, 


230, 


115, 


150, 


172, 


116, 


34, 


231, 


173, 


53, 


133, 


226, 


249, 


55, 


232, 


28, 


117, 


223, 


110, 


71, 


241, 


26, 


113, 


29, 


41, 


197, 


137, 


111, 


183, 


98, 


14, 


170, 


24, 


190, 


27, 


252, 


86, 


62, 


75, 


198, 


210, 


121, 


32, 


154, 


219, 


192, 


254, 


120, 


205, 


90, 


244, 


31, 


221, 

• 


168, 


51, 


136, 


7, 


199, 


49, 


177, 


18, 


16, 


89, 


39, 


128, 


236, 


95, 


96, 


81, 


127, 


169, 


25, 


181, 


74, 


13, 


45, 


229, 


122, 


159, 


147, 


201, 


156, 


239, 


160, 


224, 


59, 


77, 


174, 


42, 


245, 


176, 


200, 


235, 


187, 


60, 


131, 


83, 


153, 


97, 


23, 


43, 


4, 


126, 


186, 


119, 


214, 


38, 


225, 


105, 


20, 


99, 


85, 


33, 


12, 


125} ; 
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